An operations analyst asks the AI model why gross margin moved, customer by customer, and for a first draft of the commentary. Finance has released margin by customer and by product, and marked customer names and cost prices. The model receives the released figures as they are and the marked fields as placeholders, finds the movements, and drafts; finance reads the draft before anything is released. A sales manager not cleared for cost prices who asks for that column is refused, and the refusal is recorded.
Fields you mark sensitive reach the AI model masked with placeholders; fields you don't mark reach it as they are. The same value always gets the same placeholder, so masked data can still be linked to a person and remains personal data.
On records loaded into Kovac, someone not cleared for a column you have marked who asks for it is refused, and the refusal is recorded.
Clearance decides what a person may read. It never unmasks a field for the AI model: a marked field reaches the model masked on every call, whoever asks.